CVE-2023-20109
Assigner: cisco
Published: 2023-09-27T17:23:21.589Z
State: PUBLISHED
descriptions: value: A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or cause the device to crash.
 This vulnerability is due to insufficient validation of attributes in the Group Domain of Interpretation (GDOI) and G-IKEv2 protocols of the GET VPN feature. An attacker could exploit this vulnerability by either compromising an installed key server or modifying the configuration of a group member to point to a key server that is controlled by the attacker. A successful exploit could allow the attacker to execute arbitrary code and gain full control of the affected system or cause the affected system to reload, resulting in a denial of service (DoS) condition. For more information, see the Details ["#details"] section of this advisory.
affected: vendor: Cisco
product: IOS
versions: version: 12.4(24)T
status: affected
version: 12.4(24)T3
status: affected
version: 12.4(22)T1
status: affected
version: 12.4(24)T5
status: affected
version: 12.4(24)T4
status: affected
version: 12.4(22)T
status: affected
version: 12.4(24)T8
status: affected
version: 12.4(24)T2
status: affected
version: 12.4(22)T5
status: affected
version: 12.4(22)T4
status: affected
version: 12.4(24)T1
status: affected
version: 12.4(24)T7
status: affected
version: 12.4(22)T3
status: affected
version: 12.4(24)T6
status: affected
version: 12.4(22)T2
status: affected
version: 12.4(24)T4a
status: affected
version: 12.4(24)T4b
status: affected
version: 12.4(24)T3e
status: affected
version: 12.4(24)T4c
status: affected
version: 12.4(24)T4d
status: affected
version: 12.4(24)T4e
status: affected
version: 12.4(24)T3f
status: affected
version: 12.4(24)T4f
status: affected
version: 12.4(24)T4l
status: affected
version: 12.4(24)MD1
status: affected
version: 12.4(24)MD
status: affected
version: 12.4(24)MD3
status: affected
version: 12.4(24)MD2
status: affected
version: 12.4(22)MD1
status: affected
version: 12.4(22)MD2
status: affected
version: 12.4(24)MD5
status: affected
version: 12.4(22)MD
status: affected
version: 12.4(24)MD4
status: affected
version: 12.4(24)MD6
status: affected
version: 12.4(24)MD7
status: affected
version: 12.4(22)XR5
status: affected
version: 12.4(22)XR4
status: affected
version: 12.4(22)XR7
status: affected
version: 12.4(22)XR2
status: affected
version: 12.4(22)XR6
status: affected
version: 12.4(22)XR10
status: affected
version: 12.4(22)XR1
status: affected
version: 12.4(22)XR9
status: affected
version: 12.4(22)XR3
status: affected
version: 12.4(22)XR8
status: affected
version: 12.4(22)XR11
status: affected
version: 12.4(22)XR12
status: affected
version: 12.4(22)MDA3
status: affected
version: 12.4(24)MDA5
status: affected
version: 12.4(22)MDA5
status: affected
version: 12.4(24)MDA3
status: affected
version: 12.4(22)MDA4
status: affected
version: 12.4(24)MDA4
status: affected
version: 12.4(24)MDA1
status: affected
version: 12.4(22)MDA
status: affected
version: 12.4(22)MDA2
status: affected
version: 12.4(22)MDA1
status: affected
version: 12.4(24)MDA2
status: affected
version: 12.4(22)MDA6
status: affected
version: 12.4(24)MDA6
status: affected
version: 12.4(24)MDA7
status: affected
version: 12.4(24)MDA8
status: affected
version: 12.4(24)MDA10
status: affected
version: 12.4(24)MDA9
status: affected
version: 12.4(24)MDA11
status: affected
version: 12.4(24)MDA12
status: affected
version: 12.4(24)MDA13
status: affected
version: 12.4(24)YG3
status: affected
version: 12.4(24)YG4
status: affected
version: 12.4(24)YG1
status: affected
version: 12.4(24)YG2
status: affected
version: 12.4(24)YG
status: affected
version: 15.0(1)M1
status: affected
version: 15.0(1)M5
status: affected
version: 15.0(1)M4
status: affected
version: 15.0(1)M3
status: affected
version: 15.0(1)M2
status: affected
version: 15.0(1)M6
status: affected
version: 15.0(1)M
status: affected
version: 15.0(1)M7
status: affected
version: 15.0(1)M10
status: affected
version: 15.0(1)M9
status: affected
version: 15.0(1)M8
status: affected
version: 15.0(1)XA2
status: affected
version: 15.0(1)XA4
status: affected
version: 15.0(1)XA1
status: affected
version: 15.0(1)XA3
status: affected
version: 15.0(1)XA
status: affected
version: 15.0(1)XA5
status: affected
version: 15.1(2)T
status: affected
version: 15.1(1)T4
status: affected
version: 15.1(3)T2
status: affected
version: 15.1(1)T1
status: affected
version: 15.1(2)T0a
status: affected
version: 15.1(3)T3
status: affected
version: 15.1(1)T3
status: affected
version: 15.1(2)T3
status: affected
version: 15.1(2)T4
status: affected
version: 15.1(1)T2
status: affected
version: 15.1(3)T
status: affected
version: 15.1(2)T2a
status: affected
version: 15.1(3)T1
status: affected
version: 15.1(1)T
status: affected
version: 15.1(2)T2
status: affected
version: 15.1(2)T1
status: affected
version: 15.1(2)T5
status: affected
version: 15.1(3)T4
status: affected
version: 15.1(1)T5
status: affected
version: 15.1(1)XB
status: affected
version: 15.0(1)S2
status: affected
version: 15.0(1)S1
status: affected
version: 15.0(1)S
status: affected
version: 15.0(1)S3a
status: affected
version: 15.0(1)S4
status: affected
version: 15.0(1)S5
status: affected
version: 15.0(1)S4a
status: affected
version: 15.0(1)S6
status: affected
version: 15.2(1)S
status: affected
version: 15.2(2)S
status: affected
version: 15.2(1)S1
status: affected
version: 15.2(4)S
status: affected
version: 15.2(1)S2
status: affected
version: 15.2(2)S1
status: affected
version: 15.2(2)S2
status: affected
version: 15.2(2)S0a
status: affected
version: 15.2(2)S0c
status: affected
version: 15.2(4)S1
status: affected
version: 15.2(4)S4
status: affected
version: 15.2(4)S6
status: affected
version: 15.2(4)S2
status: affected
version: 15.2(4)S5
status: affected
version: 15.2(4)S3
status: affected
version: 15.2(4)S3a
status: affected
version: 15.2(4)S4a
status: affected
version: 15.2(4)S7
status: affected
version: 15.3(1)T
status: affected
version: 15.3(2)T
status: affected
version: 15.3(1)T1
status: affected
version: 15.3(1)T2
status: affected
version: 15.3(1)T3
status: affected
version: 15.3(1)T4
status: affected
version: 15.3(2)T1
status: affected
version: 15.3(2)T2
status: affected
version: 15.3(2)T3
status: affected
version: 15.3(2)T4
status: affected
version: 15.0(2)EY
status: affected
version: 15.0(2)EY1
status: affected
version: 15.0(2)EY2
status: affected
version: 15.0(2)EY3
status: affected
version: 15.1(2)S
status: affected
version: 15.1(1)S
status: affected
version: 15.1(1)S1
status: affected
version: 15.1(3)S
status: affected
version: 15.1(1)S2
status: affected
version: 15.1(2)S1
status: affected
version: 15.1(2)S2
status: affected
version: 15.1(3)S1
status: affected
version: 15.1(3)S0a
status: affected
version: 15.1(3)S2
status: affected
version: 15.1(3)S4
status: affected
version: 15.1(3)S3
status: affected
version: 15.1(3)S5
status: affected
version: 15.1(3)S6
status: affected
version: 15.1(3)S5a
status: affected
version: 15.1(4)M3
status: affected
version: 15.1(4)M
status: affected
version: 15.1(4)M1
status: affected
version: 15.1(4)M2
status: affected
version: 15.1(4)M6
status: affected
version: 15.1(4)M5
status: affected
version: 15.1(4)M4
status: affected
version: 15.1(4)M7
status: affected
version: 15.1(4)M3a
status: affected
version: 15.1(4)M10
status: affected
version: 15.1(4)M8
status: affected
version: 15.1(4)M9
status: affected
version: 15.0(2)SE
status: affected
version: 15.0(2)SE1
status: affected
version: 15.0(2)SE2
status: affected
version: 15.0(2)SE3
status: affected
version: 15.0(2)SE4
status: affected
version: 15.0(2)SE5
status: affected
version: 15.0(2)SE6
status: affected
version: 15.0(2)SE7
status: affected
version: 15.0(2)SE8
status: affected
version: 15.0(2)SE9
status: affected
version: 15.0(2)SE10
status: affected
version: 15.0(2)SE11
status: affected
version: 15.0(2)SE10a
status: affected
version: 15.0(2)SE12
status: affected
version: 15.0(2)SE13
status: affected
version: 15.1(2)GC
status: affected
version: 15.1(2)GC1
status: affected
version: 15.1(2)GC2
status: affected
version: 15.1(4)GC
status: affected
version: 15.1(4)GC1
status: affected
version: 15.1(4)GC2
status: affected
version: 15.1(1)SG
status: affected
version: 15.1(2)SG
status: affected
version: 15.1(1)SG1
status: affected
version: 15.1(1)SG2
status: affected
version: 15.1(2)SG1
status: affected
version: 15.1(2)SG2
status: affected
version: 15.1(2)SG3
status: affected
version: 15.1(2)SG4
status: affected
version: 15.1(2)SG5
status: affected
version: 15.1(2)SG6
status: affected
version: 15.1(2)SG7
status: affected
version: 15.1(2)SG8
status: affected
version: 15.0(1)MR
status: affected
version: 15.0(2)MR
status: affected
version: 15.2(4)M
status: affected
version: 15.2(4)M1
status: affected
version: 15.2(4)M2
status: affected
version: 15.2(4)M4
status: affected
version: 15.2(4)M3
status: affected
version: 15.2(4)M5
status: affected
version: 15.2(4)M8
status: affected
version: 15.2(4)M10
status: affected
version: 15.2(4)M7
status: affected
version: 15.2(4)M6
status: affected
version: 15.2(4)M9
status: affected
version: 15.2(4)M6a
status: affected
version: 15.2(4)M11
status: affected
version: 12.4(24)MDB
status: affected
version: 12.4(24)MDB1
status: affected
version: 12.4(24)MDB3
status: affected
version: 12.4(24)MDB4
status: affected
version: 12.4(24)MDB5
status: affected
version: 12.4(24)MDB6
status: affected
version: 12.4(24)MDB7
status: affected
version: 12.4(24)MDB5a
status: affected
version: 12.4(24)MDB8
status: affected
version: 12.4(24)MDB9
status: affected
version: 12.4(24)MDB10
status: affected
version: 12.4(24)MDB11
status: affected
version: 12.4(24)MDB12
status: affected
version: 12.4(24)MDB13
status: affected
version: 12.4(24)MDB14
status: affected
version: 12.4(24)MDB15
status: affected
version: 12.4(24)MDB16
status: affected
version: 12.4(24)MDB17
status: affected
version: 12.4(24)MDB18
status: affected
version: 12.4(24)MDB19
status: affected
version: 15.0(2)EX
status: affected
version: 15.0(2)EX1
status: affected
version: 15.0(2)EX2
status: affected
version: 15.0(2)EX3
status: affected
version: 15.0(2)EX4
status: affected
version: 15.0(2)EX5
status: affected
version: 15.0(2)EX8
status: affected
version: 15.0(2a)EX5
status: affected
version: 15.0(2)EX10
status: affected
version: 15.0(2)EX11
status: affected
version: 15.0(2)EX13
status: affected
version: 15.0(2)EX12
status: affected
version: 15.2(1)GC
status: affected
version: 15.2(1)GC1
status: affected
version: 15.2(1)GC2
status: affected
version: 15.2(2)GC
status: affected
version: 15.2(3)GC
status: affected
version: 15.2(3)GC1
status: affected
version: 15.2(4)GC
status: affected
version: 15.2(4)GC1
status: affected
version: 15.2(4)GC2
status: affected
version: 15.2(4)GC3
status: affected
version: 15.1(1)SY
status: affected
version: 15.1(1)SY1
status: affected
version: 15.1(2)SY
status: affected
version: 15.1(2)SY1
status: affected
version: 15.1(2)SY2
status: affected
version: 15.1(1)SY2
status: affected
version: 15.1(1)SY3
status: affected
version: 15.1(2)SY3
status: affected
version: 15.1(1)SY4
status: affected
version: 15.1(2)SY4
status: affected
version: 15.1(1)SY5
status: affected
version: 15.1(2)SY5
status: affected
version: 15.1(2)SY4a
status: affected
version: 15.1(1)SY6
status: affected
version: 15.1(2)SY6
status: affected
version: 15.1(2)SY7
status: affected
version: 15.1(2)SY8
status: affected
version: 15.1(2)SY9
status: affected
version: 15.1(2)SY10
status: affected
version: 15.1(2)SY11
status: affected
version: 15.1(2)SY12
status: affected
version: 15.1(2)SY13
status: affected
version: 15.1(2)SY14
status: affected
version: 15.1(2)SY15
status: affected
version: 15.1(2)SY16
status: affected
version: 15.3(1)S
status: affected
version: 15.3(2)S
status: affected
version: 15.3(3)S
status: affected
version: 15.3(1)S2
status: affected
version: 15.3(1)S1
status: affected
version: 15.3(2)S2
status: affected
version: 15.3(2)S1
status: affected
version: 15.3(3)S1
status: affected
version: 15.3(3)S2
status: affected
version: 15.3(3)S3
status: affected
version: 15.3(3)S6
status: affected
version: 15.3(3)S4
status: affected
version: 15.3(3)S1a
status: affected
version: 15.3(3)S5
status: affected
version: 15.3(3)S7
status: affected
version: 15.3(3)S8
status: affected
version: 15.3(3)S9
status: affected
version: 15.3(3)S10
status: affected
version: 15.3(3)S8a
status: affected
version: 15.4(1)T
status: affected
version: 15.4(2)T
status: affected
version: 15.4(1)T2
status: affected
version: 15.4(1)T1
status: affected
version: 15.4(1)T3
status: affected
version: 15.4(2)T1
status: affected
version: 15.4(2)T3
status: affected
version: 15.4(2)T2
status: affected
version: 15.4(1)T4
status: affected
version: 15.4(2)T4
status: affected
version: 15.0(2)EA
status: affected
version: 15.0(2)EA1
status: affected
version: 15.2(1)E
status: affected
version: 15.2(2)E
status: affected
version: 15.2(1)E1
status: affected
version: 15.2(3)E
status: affected
version: 15.2(1)E2
status: affected
version: 15.2(1)E3
status: affected
version: 15.2(2)E1
status: affected
version: 15.2(4)E
status: affected
version: 15.2(3)E1
status: affected
version: 15.2(2)E2
status: affected
version: 15.2(2a)E1
status: affected
version: 15.2(2)E3
status: affected
version: 15.2(2a)E2
status: affected
version: 15.2(3)E2
status: affected
version: 15.2(3a)E
status: affected
version: 15.2(3)E3
status: affected
version: 15.2(4)E1
status: affected
version: 15.2(2)E4
status: affected
version: 15.2(2)E5
status: affected
version: 15.2(4)E2
status: affected
version: 15.2(3)E4
status: affected
version: 15.2(5)E
status: affected
version: 15.2(4)E3
status: affected
version: 15.2(2)E6
status: affected
version: 15.2(5a)E
status: affected
version: 15.2(5)E1
status: affected
version: 15.2(5b)E
status: affected
version: 15.2(2)E5a
status: affected
version: 15.2(5c)E
status: affected
version: 15.2(3)E5
status: affected
version: 15.2(2)E5b
status: affected
version: 15.2(5a)E1
status: affected
version: 15.2(4)E4
status: affected
version: 15.2(2)E7
status: affected
version: 15.2(5)E2
status: affected
version: 15.2(6)E
status: affected
version: 15.2(5)E2b
status: affected
version: 15.2(4)E5
status: affected
version: 15.2(5)E2c
status: affected
version: 15.2(2)E8
status: affected
version: 15.2(6)E0a
status: affected
version: 15.2(6)E1
status: affected
version: 15.2(2)E7b
status: affected
version: 15.2(4)E5a
status: affected
version: 15.2(6)E0c
status: affected
version: 15.2(4)E6
status: affected
version: 15.2(6)E2
status: affected
version: 15.2(2)E9
status: affected
version: 15.2(4)E7
status: affected
version: 15.2(7)E
status: affected
version: 15.2(2)E10
status: affected
version: 15.2(4)E8
status: affected
version: 15.2(6)E2a
status: affected
version: 15.2(6)E2b
status: affected
version: 15.2(7)E1
status: affected
version: 15.2(7)E0a
status: affected
version: 15.2(7)E0b
status: affected
version: 15.2(7)E0s
status: affected
version: 15.2(6)E3
status: affected
version: 15.2(4)E9
status: affected
version: 15.2(7)E2
status: affected
version: 15.2(7a)E0b
status: affected
version: 15.2(4)E10
status: affected
version: 15.2(7)E3
status: affected
version: 15.2(7)E1a
status: affected
version: 15.2(7b)E0b
status: affected
version: 15.2(7)E2a
status: affected
version: 15.2(4)E10a
status: affected
version: 15.2(7)E4
status: affected
version: 15.2(7)E3k
status: affected
version: 15.2(8)E
status: affected
version: 15.2(8)E1
status: affected
version: 15.2(7)E5
status: affected
version: 15.2(7)E6
status: affected
version: 15.2(8)E2
status: affected
version: 15.2(4)E10d
status: affected
version: 15.2(7)E7
status: affected
version: 15.2(8)E3
status: affected
version: 15.2(7)E8
status: affected
version: 15.2(8)E4
status: affected
version: 15.1(3)MRA
status: affected
version: 15.1(3)MRA1
status: affected
version: 15.1(3)MRA2
status: affected
version: 15.1(3)MRA3
status: affected
version: 15.1(3)MRA4
status: affected
version: 15.1(3)SVB1
status: affected
version: 15.1(3)SVB2
status: affected
version: 15.4(1)S
status: affected
version: 15.4(2)S
status: affected
version: 15.4(3)S
status: affected
version: 15.4(1)S1
status: affected
version: 15.4(1)S2
status: affected
version: 15.4(2)S1
status: affected
version: 15.4(1)S3
status: affected
version: 15.4(3)S1
status: affected
version: 15.4(2)S2
status: affected
version: 15.4(3)S2
status: affected
version: 15.4(3)S3
status: affected
version: 15.4(1)S4
status: affected
version: 15.4(2)S3
status: affected
version: 15.4(2)S4
status: affected
version: 15.4(3)S4
status: affected
version: 15.4(3)S5
status: affected
version: 15.4(3)S6
status: affected
version: 15.4(3)S7
status: affected
version: 15.4(3)S6a
status: affected
version: 15.4(3)S8
status: affected
version: 15.4(3)S9
status: affected
version: 15.4(3)S10
status: affected
version: 15.3(3)M
status: affected
version: 15.3(3)M1
status: affected
version: 15.3(3)M2
status: affected
version: 15.3(3)M3
status: affected
version: 15.3(3)M5
status: affected
version: 15.3(3)M4
status: affected
version: 15.3(3)M6
status: affected
version: 15.3(3)M7
status: affected
version: 15.3(3)M8
status: affected
version: 15.3(3)M9
status: affected
version: 15.3(3)M10
status: affected
version: 15.3(3)M8a
status: affected
version: 15.0(2)EZ
status: affected
version: 15.1(3)SVD
status: affected
version: 15.1(3)SVD1
status: affected
version: 15.1(3)SVD2
status: affected
version: 15.2(1)EY
status: affected
version: 15.0(2)EJ
status: affected
version: 15.0(2)EJ1
status: affected
version: 15.2(1)SY
status: affected
version: 15.2(1)SY1
status: affected
version: 15.2(1)SY0a
status: affected
version: 15.2(1)SY2
status: affected
version: 15.2(2)SY
status: affected
version: 15.2(1)SY1a
status: affected
version: 15.2(2)SY1
status: affected
version: 15.2(2)SY2
status: affected
version: 15.2(1)SY3
status: affected
version: 15.2(1)SY4
status: affected
version: 15.2(2)SY3
status: affected
version: 15.2(1)SY5
status: affected
version: 15.2(1)SY6
status: affected
version: 15.2(1)SY7
status: affected
version: 15.2(1)SY8
status: affected
version: 15.2(5)EX
status: affected
version: 15.1(3)SVF
status: affected
version: 15.1(3)SVF1
status: affected
version: 15.1(3)SVE
status: affected
version: 15.4(3)M
status: affected
version: 15.4(3)M1
status: affected
version: 15.4(3)M2
status: affected
version: 15.4(3)M3
status: affected
version: 15.4(3)M4
status: affected
version: 15.4(3)M5
status: affected
version: 15.4(3)M6
status: affected
version: 15.4(3)M7
status: affected
version: 15.4(3)M6a
status: affected
version: 15.4(3)M8
status: affected
version: 15.4(3)M9
status: affected
version: 15.4(3)M10
status: affected
version: 15.0(2)EK
status: affected
version: 15.0(2)EK1
status: affected
version: 15.4(1)CG
status: affected
version: 15.4(1)CG1
status: affected
version: 15.4(2)CG
status: affected
version: 15.5(1)S
status: affected
version: 15.5(2)S
status: affected
version: 15.5(1)S1
status: affected
version: 15.5(3)S
status: affected
version: 15.5(1)S2
status: affected
version: 15.5(1)S3
status: affected
version: 15.5(2)S1
status: affected
version: 15.5(2)S2
status: affected
version: 15.5(3)S1
status: affected
version: 15.5(3)S1a
status: affected
version: 15.5(2)S3
status: affected
version: 15.5(3)S2
status: affected
version: 15.5(3)S0a
status: affected
version: 15.5(3)S3
status: affected
version: 15.5(1)S4
status: affected
version: 15.5(2)S4
status: affected
version: 15.5(3)S4
status: affected
version: 15.5(3)S5
status: affected
version: 15.5(3)S6
status: affected
version: 15.5(3)S6a
status: affected
version: 15.5(3)S7
status: affected
version: 15.5(3)S6b
status: affected
version: 15.5(3)S8
status: affected
version: 15.5(3)S9
status: affected
version: 15.5(3)S10
status: affected
version: 15.5(3)S9a
status: affected
version: 15.1(3)SVG
status: affected
version: 15.2(2)EB
status: affected
version: 15.2(2)EB1
status: affected
version: 15.2(2)EB2
status: affected
version: 15.2(6)EB
status: affected
version: 15.5(1)T
status: affected
version: 15.5(1)T1
status: affected
version: 15.5(2)T
status: affected
version: 15.5(1)T2
status: affected
version: 15.5(1)T3
status: affected
version: 15.5(2)T1
status: affected
version: 15.5(2)T2
status: affected
version: 15.5(2)T3
status: affected
version: 15.5(2)T4
status: affected
version: 15.5(1)T4
status: affected
version: 15.2(2)EA
status: affected
version: 15.2(2)EA1
status: affected
version: 15.2(2)EA2
status: affected
version: 15.2(3)EA
status: affected
version: 15.2(4)EA
status: affected
version: 15.2(4)EA1
status: affected
version: 15.2(2)EA3
status: affected
version: 15.2(4)EA3
status: affected
version: 15.2(5)EA
status: affected
version: 15.2(4)EA4
status: affected
version: 15.2(4)EA5
status: affected
version: 15.2(4)EA6
status: affected
version: 15.2(4)EA7
status: affected
version: 15.2(4)EA8
status: affected
version: 15.2(4)EA9
status: affected
version: 15.2(4)EA9a
status: affected
version: 15.5(3)M
status: affected
version: 15.5(3)M1
status: affected
version: 15.5(3)M0a
status: affected
version: 15.5(3)M2
status: affected
version: 15.5(3)M3
status: affected
version: 15.5(3)M4
status: affected
version: 15.5(3)M4a
status: affected
version: 15.5(3)M5
status: affected
version: 15.5(3)M6
status: affected
version: 15.5(3)M7
status: affected
version: 15.5(3)M6a
status: affected
version: 15.5(3)M8
status: affected
version: 15.5(3)M9
status: affected
version: 15.5(3)M10
status: affected
version: 15.5(3)SN
status: affected
version: 15.6(1)S
status: affected
version: 15.6(2)S
status: affected
version: 15.6(2)S1
status: affected
version: 15.6(1)S1
status: affected
version: 15.6(1)S2
status: affected
version: 15.6(2)S2
status: affected
version: 15.6(1)S3
status: affected
version: 15.6(2)S3
status: affected
version: 15.6(1)S4
status: affected
version: 15.6(2)S4
status: affected
version: 15.6(1)T
status: affected
version: 15.6(2)T
status: affected
version: 15.6(1)T0a
status: affected
version: 15.6(1)T1
status: affected
version: 15.6(2)T1
status: affected
version: 15.6(1)T2
status: affected
version: 15.6(2)T2
status: affected
version: 15.6(1)T3
status: affected
version: 15.6(2)T3
status: affected
version: 15.3(1)SY
status: affected
version: 15.3(1)SY1
status: affected
version: 15.3(1)SY2
status: affected
version: 15.6(2)SP
status: affected
version: 15.6(2)SP1
status: affected
version: 15.6(2)SP2
status: affected
version: 15.6(2)SP3
status: affected
version: 15.6(2)SP4
status: affected
version: 15.6(2)SP5
status: affected
version: 15.6(2)SP6
status: affected
version: 15.6(2)SP7
status: affected
version: 15.6(2)SP8
status: affected
version: 15.6(2)SP9
status: affected
version: 15.6(2)SP10
status: affected
version: 15.6(2)SN
status: affected
version: 15.6(3)M
status: affected
version: 15.6(3)M1
status: affected
version: 15.6(3)M0a
status: affected
version: 15.6(3)M1b
status: affected
version: 15.6(3)M2
status: affected
version: 15.6(3)M2a
status: affected
version: 15.6(3)M3
status: affected
version: 15.6(3)M3a
status: affected
version: 15.6(3)M4
status: affected
version: 15.6(3)M5
status: affected
version: 15.6(3)M6
status: affected
version: 15.6(3)M7
status: affected
version: 15.6(3)M6a
status: affected
version: 15.6(3)M6b
status: affected
version: 15.6(3)M8
status: affected
version: 15.6(3)M9
status: affected
version: 15.1(3)SVJ2
status: affected
version: 15.2(4)EC1
status: affected
version: 15.2(4)EC2
status: affected
version: 15.4(1)SY
status: affected
version: 15.4(1)SY1
status: affected
version: 15.4(1)SY2
status: affected
version: 15.4(1)SY3
status: affected
version: 15.4(1)SY4
status: affected
version: 15.5(1)SY
status: affected
version: 15.5(1)SY1
status: affected
version: 15.5(1)SY2
status: affected
version: 15.5(1)SY3
status: affected
version: 15.5(1)SY4
status: affected
version: 15.5(1)SY5
status: affected
version: 15.5(1)SY6
status: affected
version: 15.5(1)SY7
status: affected
version: 15.5(1)SY8
status: affected
version: 15.5(1)SY9
status: affected
version: 15.5(1)SY10
status: affected
version: 15.5(1)SY11
status: affected
version: 15.7(3)M
status: affected
version: 15.7(3)M1
status: affected
version: 15.7(3)M0a
status: affected
version: 15.7(3)M3
status: affected
version: 15.7(3)M2
status: affected
version: 15.7(3)M4
status: affected
version: 15.7(3)M5
status: affected
version: 15.7(3)M4a
status: affected
version: 15.7(3)M4b
status: affected
version: 15.7(3)M6
status: affected
version: 15.7(3)M7
status: affected
version: 15.7(3)M8
status: affected
version: 15.7(3)M9
status: affected
version: 15.8(3)M
status: affected
version: 15.8(3)M1
status: affected
version: 15.8(3)M0a
status: affected
version: 15.8(3)M0b
status: affected
version: 15.8(3)M2
status: affected
version: 15.8(3)M1a
status: affected
version: 15.8(3)M3
status: affected
version: 15.8(3)M2a
status: affected
version: 15.8(3)M4
status: affected
version: 15.8(3)M3a
status: affected
version: 15.8(3)M3b
status: affected
version: 15.8(3)M5
status: affected
version: 15.8(3)M6
status: affected
version: 15.8(3)M7
status: affected
version: 15.8(3)M8
status: affected
version: 15.8(3)M9
status: affected
version: 15.8(3)M10
status: affected
version: 15.9(3)M
status: affected
version: 15.9(3)M1
status: affected
version: 15.9(3)M0a
status: affected
version: 15.9(3)M2
status: affected
version: 15.9(3)M3
status: affected
version: 15.9(3)M2a
status: affected
version: 15.9(3)M3a
status: affected
version: 15.9(3)M4
status: affected
version: 15.9(3)M3b
status: affected
version: 15.9(3)M5
status: affected
version: 15.9(3)M4a
status: affected
version: 15.9(3)M6
status: affected
version: 15.9(3)M7
status: affected
version: 15.9(3)M6a
status: affected
version: 15.9(3)M6b
status: affected
version: 15.9(3)M7a
status: affected
vendor: Cisco
product: Cisco IOS XE Software
versions: version: 3.7.0S
status: affected
version: 3.7.1S
status: affected
version: 3.7.2S
status: affected
version: 3.7.3S
status: affected
version: 3.7.4S
status: affected
version: 3.7.5S
status: affected
version: 3.7.6S
status: affected
version: 3.7.7S
status: affected
version: 3.7.4aS
status: affected
version: 3.7.2tS
status: affected
version: 3.7.0bS
status: affected
version: 3.7.1aS
status: affected
version: 3.3.0SG
status: affected
version: 3.3.2SG
status: affected
version: 3.3.1SG
status: affected
version: 3.8.0S
status: affected
version: 3.8.1S
status: affected
version: 3.8.2S
status: affected
version: 3.9.1S
status: affected
version: 3.9.0S
status: affected
version: 3.9.2S
status: affected
version: 3.9.1aS
status: affected
version: 3.9.0aS
status: affected
version: 3.4.0SG
status: affected
version: 3.4.2SG
status: affected
version: 3.4.1SG
status: affected
version: 3.4.3SG
status: affected
version: 3.4.4SG
status: affected
version: 3.4.5SG
status: affected
version: 3.4.6SG
status: affected
version: 3.4.7SG
status: affected
version: 3.4.8SG
status: affected
version: 3.5.0E
status: affected
version: 3.5.1E
status: affected
version: 3.5.2E
status: affected
version: 3.5.3E
status: affected
version: 3.10.0S
status: affected
version: 3.10.1S
status: affected
version: 3.10.2S
status: affected
version: 3.10.3S
status: affected
version: 3.10.4S
status: affected
version: 3.10.5S
status: affected
version: 3.10.6S
status: affected
version: 3.10.2tS
status: affected
version: 3.10.7S
status: affected
version: 3.10.1xbS
status: affected
version: 3.10.8S
status: affected
version: 3.10.8aS
status: affected
version: 3.10.9S
status: affected
version: 3.10.10S
status: affected
version: 3.11.1S
status: affected
version: 3.11.2S
status: affected
version: 3.11.0S
status: affected
version: 3.11.3S
status: affected
version: 3.11.4S
status: affected
version: 3.12.0S
status: affected
version: 3.12.1S
status: affected
version: 3.12.2S
status: affected
version: 3.12.3S
status: affected
version: 3.12.0aS
status: affected
version: 3.12.4S
status: affected
version: 3.13.0S
status: affected
version: 3.13.1S
status: affected
version: 3.13.2S
status: affected
version: 3.13.3S
status: affected
version: 3.13.4S
status: affected
version: 3.13.5S
status: affected
version: 3.13.2aS
status: affected
version: 3.13.0aS
status: affected
version: 3.13.5aS
status: affected
version: 3.13.6S
status: affected
version: 3.13.7S
status: affected
version: 3.13.6aS
status: affected
version: 3.13.7aS
status: affected
version: 3.13.8S
status: affected
version: 3.13.9S
status: affected
version: 3.13.10S
status: affected
version: 3.6.0E
status: affected
version: 3.6.1E
status: affected
version: 3.6.2aE
status: affected
version: 3.6.2E
status: affected
version: 3.6.3E
status: affected
version: 3.6.4E
status: affected
version: 3.6.5E
status: affected
version: 3.6.6E
status: affected
version: 3.6.5aE
status: affected
version: 3.6.5bE
status: affected
version: 3.6.7E
status: affected
version: 3.6.8E
status: affected
version: 3.6.7bE
status: affected
version: 3.6.9E
status: affected
version: 3.6.10E
status: affected
version: 3.14.0S
status: affected
version: 3.14.1S
status: affected
version: 3.14.2S
status: affected
version: 3.14.3S
status: affected
version: 3.14.4S
status: affected
version: 3.15.0S
status: affected
version: 3.15.1S
status: affected
version: 3.15.2S
status: affected
version: 3.15.1cS
status: affected
version: 3.15.3S
status: affected
version: 3.15.4S
status: affected
version: 3.16.0S
status: affected
version: 3.16.1S
status: affected
version: 3.16.1aS
status: affected
version: 3.16.2S
status: affected
version: 3.16.2aS
status: affected
version: 3.16.0cS
status: affected
version: 3.16.3S
status: affected
version: 3.16.2bS
status: affected
version: 3.16.3aS
status: affected
version: 3.16.4S
status: affected
version: 3.16.4aS
status: affected
version: 3.16.4bS
status: affected
version: 3.16.5S
status: affected
version: 3.16.4dS
status: affected
version: 3.16.6S
status: affected
version: 3.16.7S
status: affected
version: 3.16.6bS
status: affected
version: 3.16.7aS
status: affected
version: 3.16.7bS
status: affected
version: 3.16.8S
status: affected
version: 3.16.9S
status: affected
version: 3.16.10S
status: affected
version: 3.17.0S
status: affected
version: 3.17.1S
status: affected
version: 3.17.2S
status: affected
version: 3.17.1aS
status: affected
version: 3.17.3S
status: affected
version: 3.17.4S
status: affected
version: 16.1.1
status: affected
version: 16.1.2
status: affected
version: 16.1.3
status: affected
version: 16.2.1
status: affected
version: 16.2.2
status: affected
version: 3.8.0E
status: affected
version: 3.8.1E
status: affected
version: 3.8.2E
status: affected
version: 3.8.3E
status: affected
version: 3.8.4E
status: affected
version: 3.8.5E
status: affected
version: 3.8.5aE
status: affected
version: 3.8.6E
status: affected
version: 3.8.7E
status: affected
version: 3.8.8E
status: affected
version: 3.8.9E
status: affected
version: 3.8.10E
status: affected
version: 16.3.1
status: affected
version: 16.3.2
status: affected
version: 16.3.3
status: affected
version: 16.3.1a
status: affected
version: 16.3.4
status: affected
version: 16.3.5
status: affected
version: 16.3.5b
status: affected
version: 16.3.6
status: affected
version: 16.3.7
status: affected
version: 16.3.8
status: affected
version: 16.3.9
status: affected
version: 16.3.10
status: affected
version: 16.3.11
status: affected
version: 16.4.1
status: affected
version: 16.4.2
status: affected
version: 16.4.3
status: affected
version: 16.5.1
status: affected
version: 16.5.1a
status: affected
version: 16.5.1b
status: affected
version: 16.5.2
status: affected
version: 16.5.3
status: affected
version: 3.18.0aS
status: affected
version: 3.18.0S
status: affected
version: 3.18.1S
status: affected
version: 3.18.2S
status: affected
version: 3.18.3S
status: affected
version: 3.18.4S
status: affected
version: 3.18.0SP
status: affected
version: 3.18.1SP
status: affected
version: 3.18.1aSP
status: affected
version: 3.18.1bSP
status: affected
version: 3.18.1cSP
status: affected
version: 3.18.2SP
status: affected
version: 3.18.2aSP
status: affected
version: 3.18.3SP
status: affected
version: 3.18.4SP
status: affected
version: 3.18.3aSP
status: affected
version: 3.18.3bSP
status: affected
version: 3.18.5SP
status: affected
version: 3.18.6SP
status: affected
version: 3.18.7SP
status: affected
version: 3.18.8aSP
status: affected
version: 3.18.9SP
status: affected
version: 3.9.0E
status: affected
version: 3.9.1E
status: affected
version: 3.9.2E
status: affected
version: 16.6.1
status: affected
version: 16.6.2
status: affected
version: 16.6.3
status: affected
version: 16.6.4
status: affected
version: 16.6.5
status: affected
version: 16.6.4a
status: affected
version: 16.6.5a
status: affected
version: 16.6.6
status: affected
version: 16.6.7
status: affected
version: 16.6.8
status: affected
version: 16.6.9
status: affected
version: 16.6.10
status: affected
version: 16.7.1
status: affected
version: 16.7.1a
status: affected
version: 16.7.1b
status: affected
version: 16.7.2
status: affected
version: 16.7.3
status: affected
version: 16.7.4
status: affected
version: 16.8.1
status: affected
version: 16.8.1a
status: affected
version: 16.8.1b
status: affected
version: 16.8.1s
status: affected
version: 16.8.1c
status: affected
version: 16.8.1d
status: affected
version: 16.8.2
status: affected
version: 16.8.1e
status: affected
version: 16.8.3
status: affected
version: 16.9.1
status: affected
version: 16.9.2
status: affected
version: 16.9.1a
status: affected
version: 16.9.1b
status: affected
version: 16.9.1s
status: affected
version: 16.9.3
status: affected
version: 16.9.4
status: affected
version: 16.9.3a
status: affected
version: 16.9.5
status: affected
version: 16.9.5f
status: affected
version: 16.9.6
status: affected
version: 16.9.7
status: affected
version: 16.9.8
status: affected
version: 16.10.1
status: affected
version: 16.10.1a
status: affected
version: 16.10.1b
status: affected
version: 16.10.1s
status: affected
version: 16.10.1c
status: affected
version: 16.10.1e
status: affected
version: 16.10.1d
status: affected
version: 16.10.2
status: affected
version: 16.10.1f
status: affected
version: 16.10.1g
status: affected
version: 16.10.3
status: affected
version: 3.10.0E
status: affected
version: 3.10.1E
status: affected
version: 3.10.0cE
status: affected
version: 3.10.2E
status: affected
version: 3.10.3E
status: affected
version: 16.11.1
status: affected
version: 16.11.1a
status: affected
version: 16.11.1b
status: affected
version: 16.11.2
status: affected
version: 16.11.1s
status: affected
version: 16.12.1
status: affected
version: 16.12.1s
status: affected
version: 16.12.1a
status: affected
version: 16.12.1c
status: affected
version: 16.12.1w
status: affected
version: 16.12.2
status: affected
version: 16.12.1y
status: affected
version: 16.12.2a
status: affected
version: 16.12.3
status: affected
version: 16.12.8
status: affected
version: 16.12.2s
status: affected
version: 16.12.1x
status: affected
version: 16.12.1t
status: affected
version: 16.12.4
status: affected
version: 16.12.3s
status: affected
version: 16.12.3a
status: affected
version: 16.12.4a
status: affected
version: 16.12.5
status: affected
version: 16.12.6
status: affected
version: 16.12.1z1
status: affected
version: 16.12.5a
status: affected
version: 16.12.5b
status: affected
version: 16.12.1z2
status: affected
version: 16.12.6a
status: affected
version: 16.12.7
status: affected
version: 16.12.9
status: affected
version: 3.11.0E
status: affected
version: 3.11.1E
status: affected
version: 3.11.2E
status: affected
version: 3.11.3E
status: affected
version: 3.11.1aE
status: affected
version: 3.11.4E
status: affected
version: 3.11.3aE
status: affected
version: 3.11.5E
status: affected
version: 3.11.6E
status: affected
version: 3.11.7E
status: affected
version: 3.11.8E
status: affected
version: 17.1.1
status: affected
version: 17.1.1a
status: affected
version: 17.1.1s
status: affected
version: 17.1.1t
status: affected
version: 17.1.3
status: affected
version: 17.2.1
status: affected
version: 17.2.1r
status: affected
version: 17.2.1a
status: affected
version: 17.2.1v
status: affected
version: 17.2.2
status: affected
version: 17.2.3
status: affected
version: 17.3.1
status: affected
version: 17.3.2
status: affected
version: 17.3.3
status: affected
version: 17.3.1a
status: affected
version: 17.3.1w
status: affected
version: 17.3.2a
status: affected
version: 17.3.1x
status: affected
version: 17.3.1z
status: affected
version: 17.3.4
status: affected
version: 17.3.5
status: affected
version: 17.3.4a
status: affected
version: 17.3.6
status: affected
version: 17.3.4b
status: affected
version: 17.3.4c
status: affected
version: 17.3.5a
status: affected
version: 17.3.5b
status: affected
version: 17.3.7
status: affected
version: 17.4.1
status: affected
version: 17.4.2
status: affected
version: 17.4.1a
status: affected
version: 17.4.1b
status: affected
version: 17.4.2a
status: affected
version: 17.5.1
status: affected
version: 17.5.1a
status: affected
version: 17.5.1c
status: affected
version: 17.6.1
status: affected
version: 17.6.2
status: affected
version: 17.6.1w
status: affected
version: 17.6.1a
status: affected
version: 17.6.1x
status: affected
version: 17.6.3
status: affected
version: 17.6.1y
status: affected
version: 17.6.1z
status: affected
version: 17.6.3a
status: affected
version: 17.6.4
status: affected
version: 17.6.1z1
status: affected
version: 17.6.5
status: affected
version: 17.6.5a
status: affected
version: 17.7.1
status: affected
version: 17.7.1a
status: affected
version: 17.7.1b
status: affected
version: 17.7.2
status: affected
version: 17.10.1
status: affected
version: 17.10.1a
status: affected
version: 17.10.1b
status: affected
version: 17.8.1
status: affected
version: 17.8.1a
status: affected
version: 17.9.1
status: affected
version: 17.9.1w
status: affected
version: 17.9.2
status: affected
version: 17.9.1a
status: affected
version: 17.9.1x
status: affected
version: 17.9.1y
status: affected
version: 17.9.3
status: affected
version: 17.9.2a
status: affected
version: 17.9.1x1
status: affected
version: 17.9.3a
status: affected
version: 17.9.1y1
status: affected
version: 17.11.1
status: affected
version: 17.11.1a
status: affected
version: 17.11.99SW
status: affected
problemTypes: descriptions: description: Out-of-bounds Write
type: cwe
cweId: CWE-787
metrics: format: cvssV3_1
cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
baseScore: 6.6
baseSeverity: MEDIUM
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploits: value: Cisco discovered attempted exploitation of the GET VPN feature and conducted a technical code review of the feature. This vulnerability was discovered during our internal investigation. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability.
source: advisory: cisco-sa-getvpn-rce-g8qR68sx
discovery: INTERNAL
defects: CSCwe14195
CSCwe24118
CSCwf49531